<!DOCTYPE html>
<body>
This represents not an extension, but an HTML page within an untrusted
origin (127.0.0.1).
</body>
<script>
function dropFrame() {
  var s = location.href.toString();
  if (s.indexOf('127.0.0.1') > 0) {
    // try to frame a copy of an error page from the webstore origin, but
    // not under the webstore root directory.  The server does not send
    // an x-frame-options header for the error page.
    var f = document.createElement('iframe');
    s = s.replace('127.0.0.1', 'www.example.com');
    s = s.replace('/extensions/', '/nonesuch/extensions/');
    f.src = s;
    document.body.appendChild(f);
  }
}
</script>
</html>
